appsec

The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics.

The OWASP ZAP core project

Web path scanner

OWASP Juice Shop: Probably the most modern and sophisticated insecure web application

A list of web application security

Next generation web scanner

w3af: web application attack and audit framework, the open source web vulnerability scanner.

Open Source Vulnerability Management Platform

Git All the Payloads! A collection of web attack payloads.

Complete Practical Study Plan to become a successful cybersecurity engineer based on roles like Pentest, AppSec, Cloud Security, DevSecOps and so on...

DefectDojo is a DevSecOps and vulnerability management tool.

An OOB interaction gathering server and client library

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.

An open source, git-ops, zero-trust secret encryption and decryption solution for Kubernetes applications

Some of my security stuff and vulnerabilities. Nothing advanced. More to come.

vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.